westinghouse, responses to requests for additional information … · 2012. 12. 5. · august 9,...

( )WestinghouseWestinghouse Electric CompanyNuclear ServicesP.O. Box 355Pittsburgh, Pennsylvania 15230-0355USA

Direct tel: (412) 374-4643Direct fax: (412) 374-3846

e-mail: [email protected]

U.S. Nuclear Regulatory CommissionDocument Control DeskWashington, DC 20555-0001

LTR-NRC-l 1-42

August 9, 2011

Subject: Responses to Requests for Additional Information on 6002-00301, CS Innovations' "AdvancedLogic System Topical Report"

References:

1. NRC letter, A. L. Hon (NRC) to L. Erin (CS Innovations), Request. for Additional Information,CS Innovations - Advanced Logic Systems Topical Report (TAC No. ME4454)

Reference I transmitted Requests for Additional Information (RAIs) regarding CS Innovations'"Advanced Logic System Topical Report." Responses to the RAIs are attached.

Correspondence with respect to the RAI responses should be addressed to:

Ms. Stephanie SmithWestinghouse Electric CompanyNuclear Automation5000 Ericson DriveWarrendale, PA 15086

/

Very truly yours,

J. A. Gresham, ManagerRegulatory Compliance

Cc: A. L. Hon (NRC OWFN 12 D20)Attachment

'~jgjb

Westinghouse Non-Proprietary Class 3

LTR-NRC- 11-42Attachment

Attachment to LTR-NRC-11-42

Responses to Requests for Additional Information (RAIs) on 6002-00301, CS Innovations'"Advanced Logic System Topical Report"

(IC-11-106)

Westinghouse Non-Proprietary Class 3eWestinghouse Westinghouse Electric CompanyNuclear Automation5000 Ericsson DriveWarrendale, PA 15086

To: File Date: August 5, 2011

Reference 1: ADAMS ACCESSION NO.: ML1117517222 Letter No.: IC-1 1-106

Subject: Responses to Requests for Additional Information (RAIs) onthe Advanced Logic System Topical Report, Document 6002-00301

This letter documents the Westinghouse responses to NRC requests for additional information onthe Advanced Logic System Topical Report per Reference 1.

Question #1:

Describe how the combination of environmental conditions that are represented in theenvironmental profile of Advanced Logic System (ALS) EQ Plan (Section 5) and the ALSTopical Report (Section 4.1.1) and the limits identified in ALS Topical Report and the ALSPlatform Requirements Specification (Section 9.1) sufficiently envelope the ALS Platform'ssusceptibility to synergistic effects from the proposed service conditions. This descriptionshould address Regulatory Guide 1.209 Regulatory Position 1 and Digital I&C-ISG-06Section D.5.4.1.

Answer #1:

The ALS Platform follows the standard Westinghouse Equipment Qualification methodology forqualifying safety grade equipment as documented in the NRC approved WCAP-8587, revision 6-A. The postulated worst case abnormal temperature and humidity conditions are based on Table6-1 (reproduced below) for equipment located outside of containment in mild environments.Figure 6-1 (reproduced below) also illustrates the abnormal temperature and humidity conditions.As required by Regulatory Guide 1.209, the test conditions will simulate the actual abnormalenvironments and durations given in the Table.

To address synergistic affects, the environmental conditions of temperature, humidity, voltageand frequency are applied simultaneously to the equipment under test. Performance of theequipment and its ability to perform its safety function are demonstrated under these extremes.Any additional synergistic effects resulting from future service conditions will have to beevaluated when they are made available.

Q20111 Westinghouse Electric Company LLCAll Rights Reserved


LTR-NRC- 11-42Attachment

Attachment to LTR-NRC-11-42

Responses to Requests for Additional Information (RAIs) on 6002-00301, CS Innovations'"Advanced Logic System Topical Report"

(IC-11-106)


eWestinghouse Westinghouse Electric CompanyNuclear Automation5000 Ericsson DriveWarrendale, PA 15086

To: File Date: August 5,2011

Reference 1: ADAMS ACCESSION NO.: ML1117517222 Letter No.: IC-11-106

Subject: Responses to Requests for Additional Information (RAIs) onthe Advanced Logic System Topical Report, Document 6002-00301

This letter documents the Westinghouse responses to NRC requests for additional information onthe Advanced Logic System Topical Report per Reference 1.

Question #1:

Describe how the combination of environmental conditions that are represented in theenvironmental profile of Advanced Logic System (ALS) EQ Plan (Section 5) and the ALSTopical Report (Section 4.1.1) and the limits identified in ALS Topical Report and the ALSPlatform Requirements Specification (Section 9.1) sufficiently envelope the ALS Platform'ssusceptibility to synergistic effects from the proposed service conditions. This descriptionshould address Regulatory Guide 1.209 Regulatory Position 1 and Digital I&C-ISG-06Section D.5.4.1.

Answer #1:

The ALS Platform follows the standard Westinghouse Equipment Qualification methodology forqualifying safety grade equipment as documented in the NRC approved WCAP-8587, revision 6-A. The postulated worst case abnormal temperature and humidity conditions are based on Table6-1 (reproduced below) for equipment located outside of containment in mild environments.Figure 6-1 (reproduced below) also illustrates the abnormal temperature and humidity conditions.As required by Regulatory Guide 1.209, the test conditions will simulate the actual abnormalenvironments and durations given in the Table.

To address synergistic affects, the environmental conditions of temperature, humidity, voltageand frequency are applied simultaneously to the equipment under test. Performance of theequipment and its ability to perform its safety function are demonstrated under these extremes.Any additional synergistic effects resulting from future service conditions will have to beevaluated when they are made available.

©2011 Westinghouse Electric Company LLCAll Rights Reserved


Page 2 of 9

Qualification is performed to envelop the anticipated operating environments. Theenvironmental requirements in the ALS Platform Requirement Specification are not the basisused to develop environmental qualification testing profiles.

TABLE 6-1

NORMAL. AND ABNORMAL OPERAT ING ENVIRONMENTS

CGneral

Area

Zone Zore Typica~l

Descriptio code Areas

Normel Operation Abnormal Operation

Range Temp RH PMe. Time Temp RH Press.

t)_ (%L) (11g) Limit (&) %) (oi.)

In-a.Cntainment hIacceslble, IlC Inside See. Max

Shield Min135 71 -0.3

65 20 -0.18 hours 150 95 Atmos

50 0 Atmos

120 95 Atmos

50 0 Atrnos

Accessible IC/O Outside See. Max 120 70 40.)

Shield Min 65 20 -0.1

Out of Air(.

Containment Conditioned

OCIA.C. Control room, Max

Aux Equip Room Min

B? 99

s0 s0 Atmo. 12 hre 120 35 Atm.o

60 30 Atmo, 40 0 Atmoa

82 95

104 70 Atmo. 12 hr. 120 35 Atmos

60 20 Atmos 40 0 Atmos

Ventilated OCCV Aux building.

Safeguards

Max

Min

Non-

Ventilated

OCINV Turbine-

Hall

Max 104 70 Atmoa -

Min 60 20 Atmo.

82 95

120 35 Atmos

40 0 Atmos

Note a: Abnortmal operating paramretea only apply for applications where Close 1 eair conditioning wyetern eranot sipplied,


Page 3 of 9

100

I-

:;=

40 50 60 70 80 90 100 hlO 120

DRY BULB TEMPERATURE (OF)

a•

Figure 6 1 Tempierature Versus Humidity - Enclosed Environments Outside Containment


Page 4 of 9

Question #2:

Describe in sufficient detail the margin for temperature and humidity that is represented by theenvironmental qualification test conditions. This description should quantify the proposedmagnitude for each and clarify how and where each margin is provided. This description shouldaddress margin in relation to intended platform service conditions, as each term is defined withinIEEE Std 323-2003, which is endorsed by Regulatory Guide 1.209.

Answer #2:

The ALS Platform follows the standard Westinghouse Equipment Qualification methodology forqualifying safety grade equipment as documented in the NRC approved version of WCAP-8587,revision 6-A. As described in Section 7.1.1 of WCAP-8587, margin for mild environmentabnormal environmental extremes is addressed by demonstrating equipment performancethrough a double cycle of abnormal service condition extremes as shown in Figure 1 of Section5.1 of the ALS EQ test plan.

The temperature, humidity, voltage, frequency, and duration conditions of the EQ test for theALS Platform are compared to the service conditions for each individual application as theybecome available to quantify actual margin.


Page 5 of 9

Question #3:

Describe how the proposed approach for EQ will provide adequate assurance of operability forother untested FPGA-programmed variants of the boards. In addition to functionally identicalstandard boards, this justification should be sufficient to address the application specific FPGAprogram of core logic boards, which have been proposed to be type tested as a representativeapplication. Within this description clarify any role that application specific System CommercialGrade Dedication (CGD) is intended to contribute to assurance of operability.

Answer #3:

The Equipment Qualification (EQ) of the ALS platform is intended to qualify the ALS hardware.Any changes that are made after performing EQ testing will be evaluated to determine if thechange impacts the qualification or the design. All changes are controlled by the processesdefined in the "ALS Configuration Management Plan," 6002-00020. Potential changes to anALS board can be categorized as either hardware or FPGA changes. Since hardware changes onthe board will be handled in the same way that changes have been evaluated on past projects, thisdiscussion will focus on changes to the FPGA.

Some signals are generated within the FPGA and do not leave the device. They are never routedto the input/output pins. For these signals, the key factors that could impact qualification resultsare timing and operating frequency. The design process will ensure that all timing constraints aresatisfied. For ALS, the operating frequency is controlled in hardware by the crystal on the board,and would be evaluated using the methods to evaluate hardware changes. Therefore, since theALS boards will have the same operating frequency and the FPGA changes will be evaluated toverify that they do not impact the safety functions, it can be concluded that changes to internalsignals of the FPGA will not affect the qualification.

Signals that have effects outside of the FPGA can be examined in two categories. The first is asignal that drives other devices on the board. Changing the sampling rate of an analog to digitalconverter would be one such example. The second is a function that has an impact on thefunction of the board. An example of this type of change is a modification to the digital filter ofan input signal. Any changes in these categories need to be evaluated to determine the impact tothe qualification. The evaluation will be documented as part of the design change.The Core Logic Board within the ALS platform is designed such that all hardware interfaces onthe board remain the same, regardless of the specific application. The functions that will beadded to the FPGA for an application will use the same input/output pins of the FPGA. Only theprogramming internal to the FPGA will need to be changed from application to application. Forthis reason, the signals will all be signals that are limited to the FPGA, and will not impact theplatform qualification as long as the new functions are evaluated as discussed in the paragraphsabove. The design process for the overall system will validate the functionality of the system,and will assess all aspects of extending the qualification of the platform for use in the specificapplication. These functions will be part of that overall evaluation that will be performed in thesystem design and test phases.


Page 6 of 9

The discussion above addresses the operation of the boards that are part of the ALS Platform. Asthese boards are used in an application, the Critical Characteristics of the applications will beevaluated and an application specific Commercial Grade Dedication will verify all of thesystem's critical characteristics.


Page 7 of 9

Question #4:

Describe how the failures allowed by the ALS EQ Plan's acceptance criteria [B] or [C] arecaptured and evaluated to ensure that the reported failure is not symptomatic of a functional orperformance degradation for a future plant specific application. Describe how this evaluationwill be used to demonstrate that the qualification testing is adequate for plant specific equipmentconfigurations, behavior, and safety-functions of future license amendments that reference thetopical report. This description should include a discussion of the characteristics captured for thepower supply inputs to the ALS Platform; because, the power supply is outside of the topicalreport scope but its performance could materially affect the EMI/RFI test results, including somethat apply acceptance criteria [B].

Answer #4:

The acceptance criteria listed as [B] or [C] should be criteria [A] for all EMI/RFI tests requiredby Regulatory Guide 1.180 revision 1, but the change has not yet been captured in the currentrevisions of the ALS Topical Report and the ALS EQ Plan. No failures of the ALS Platformduring qualification testing are permitted. The ALS Platform must demonstrate the ability tooperate before, during, and after each qualification test.

The ALS Platform is being tested with a qualified power supply that has the capability to protectagainst power related EMI/RFI disturbances. It is expected that the qualified power supply or anequivalent will be used in conjunction with the ALS Platform when it is installed in a specificapplication.


Page 8 of 9

Question #5:

Describe what is meant by "a reasonable amount of time," as used in the acceptance criteria [B]of section 4 of the ALS EQ Plan, to quantify this term and to clarify any relationship thatallowable durations may have on operability assessments or plans to establish TechnicalSpecification Allowed Outage Times or Completion Times (AOTs/CTs). This descriptionshould clarify the expected equipment response when these failures have been detected andindicated but have not yet cleared.

Answer #5:

The acceptance criteria listed as [B] or [C] should be criteria [A] for all EMIIRFI tests requiredby Regulatory Guide 1.180 revision 1, but the change has not yet been captured in the currentrevisions of the ALS Topical Report and the ALS EQ Plan. The ALS Platform must demonstratethe ability to operate before, during, and after each qualification test.

I


Page 9 of 9

Ouestion #6:

Describe all features of the test configuration that contribute to its behavior in response todetectable failures. This description should include, but not necessarily be limited to, itsconfigured fail-safe states, the class of each detectable failure (fatal, vital or non-vital), the abilityof the self-testing to detect and report performance beyond specified operating tolerances, andthe logic within its core logic board in response to detected failures.

Answer #6:

The acceptance criteria listed as [B] or [C] should be criteria [A] for all EMIIRFI tests requiredby Regulatory Guide 1.180 revision 1, but the change has not yet been captured in the currentrevisions of the ALS Topical Report and the ALS EQ Plan. The ALS Platform must demonstratethe ability to operate before, during, and after each qualification test. Therefore any indication offailure, regardless of its class, indicates a failed test and the inability of the system to perform thesafety function. The details of the test setup and equipment will be documented in the EQSummary Report. As the ALS Platform is used in an application, all requirements in theapplication will be tested as part of the application project.

Author:Larissa Marple*

Reviewer(s):Stephanie Smith*Marty Ryan*

Manager(s):Steve Seaman*Mark Stofko*

* Electronically approved records are authenticated in the electronic document management system.

westinghouse, responses to requests for additional information … · 2012. 12. 5. · august 9,...

Documents